
#arpwatch
:programname, isequal, "arpwatch"            /var/log/arpwatch.log
& stop
